Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.131210
Category:Mageia Linux Local Security Checks
Title:Mageia Linux Local Check: mgasa-2016-0050
Summary:Mageia Linux Local Security Checks mgasa-2016-0050
Description:Summary:
Mageia Linux Local Security Checks mgasa-2016-0050

Vulnerability Insight:
libcurl before 7.47.0 will reuse NTLM-authenticated proxy connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. The effect of this flaw is that the application could be reusing a proxy connection using the previously used credentials and thus it could be given to or prevented access from resources that it wasn't intended to (CVE-2016-0755).

Solution:
Update the affected packages to the latest available version.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:P/A:N

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2016-0755
http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html
BugTraq ID: 82307
http://www.securityfocus.com/bid/82307
Debian Security Information: DSA-3455 (Google Search)
http://www.debian.org/security/2016/dsa-3455
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176546.html
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177342.html
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176413.html
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177383.html
https://security.gentoo.org/glsa/201701-47
http://packetstormsecurity.com/files/135695/Slackware-Security-Advisory-curl-Updates.html
http://www.securitytracker.com/id/1034882
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.519965
SuSE Security Announcement: openSUSE-SU-2016:0360 (Google Search)
http://lists.opensuse.org/opensuse-updates/2016-02/msg00031.html
SuSE Security Announcement: openSUSE-SU-2016:0373 (Google Search)
http://lists.opensuse.org/opensuse-updates/2016-02/msg00044.html
SuSE Security Announcement: openSUSE-SU-2016:0376 (Google Search)
http://lists.opensuse.org/opensuse-updates/2016-02/msg00047.html
http://www.ubuntu.com/usn/USN-2882-1
CopyrightCopyright (C) 2016 Eero Volotinen

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.